This IP belongs to Canadian Department of Defense.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

This IP belongs to MTS (Mobile TeleSystems).

It attempted to perform a NTP amplification attack on the SSH server.

The IP attempted to use the POP3 server to relay spam.

This IP belongs to World Fuel Services.

This IP belongs to Microsoft.

The IP has been caught trying to deliver spyware into our system to compromise sensitive data.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

It attempted to perform a SSDP amplification attack on the SSH server.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

It appears that this IP was initiating DNSChanger malware attacks on our network.

It attempted to use the SASL server to distribute malware.

Unusual patterns in user agent strings.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

The IP was the origin of numerous webcam loggers, a serious privacy invasion.

Multiple attempts to access the server using different ports or protocols.

It initiated multiple account lockouts in a short period.

This IP belongs to Nexon.

This IP belongs to Facebook.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

The IP attempted to perform a replay attack on the SSH server.

It showed unusual activity in the server's error logs.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

Multiple requests to the server's robots.txt file.